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QUESTION 1 

Scenario: An administrator is implementing a two-factor authentication solution with an RSA 
SecurelD product. The administrator already has the server name and port number of the RSA 
server. 

Which additional information does the administrator need to configure RSA SecurelD? 

A. LDAP password 

B. Firewall access rule 

C. Authentication policy 

D. RADIUS shared secret 

Answer: D 
QUESTION 2 

Scenario: An administrator is creating a NetScaler Gateway virtual server for mobile devices only. 
The administrator must include two-factor authentication. 

Which two steps must the administrator take to configure two-factor authentication for this 
environment? (Choose two.) 

A. Bind the RSA policy first. 

B. Bind the LDAP policy first. 

C. Create an authentication policy. 

D. Create a pre-authentication policy. 

Answer: AC 
QUESTION 3 

Scenario: An administrator implemented RADIUS with NetScaler Gateway as a two-factor 
authentication solution for a XenDesktop implementation. A planned outage is scheduled in wake 
of a software upgrade on the RADIUS infrastructure. During the outage, the administrator needs to 
disable the two-factor authentication on NetScaler Gateway to enable users' continued access to 
published applications. 

Which action could the administrator take to meet the needs of the scenario without affecting the 
connected users? 

A. Delete the RADIUS authentication policy. 

B. Set the RADIUS policy to be secondary authentication. 

C. Disable authentication on the NetScaler Gateway virtual server. 

D. Unbind the RADIUS authentication policy from the NetScaler Gateway virtual server. 

Answer: D 
QUESTION 4 

Scenario: After a restart of a single NetScaler, users complain that the logon page has changed. 
An administrator plans to verify that a startup script exists and contains the necessary command. 
Where can the administrator find the startup script? 

A. /etc 

B. /dev 

C. /nsconfig 

D. /netscaler 

Answer: C 
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QUESTION 5 

Scenario: An administrator plans to implement NetScaler to load balance Web Interface traffic. The 
Web Interface servers are using standard non-secure ports. Company policy states that all external 
traffic must be secure. 

The administrator has added the servers for the Web Interface under Load Balancing. 

In order to load balance the Web Interface traffic and comply with company policy, the administrator 

should add services for and create an . (Choose the correct set of options 

to complete the sentence.) 

A. SSL; SSL virtual server 

B. SSL; HTTP virtual server 

C. HTTP; SSL virtual server 

D. HTTP; HTTP virtual server 



QUESTION 6 

An administrator needs to prevent a single point of failure for the Secure Ticket Authority servers 
configured on NetScaler Gateway. 

Which method could the administrator use to accomplish this? 

A. Create a DNS round robin for the Secure Ticket Authority servers. 

B. Add Secure Ticket Authority servers individually to the virtual server. 

C. Create a virtual server to load balance the Secure Ticket Authority servers. 

D. Configure Windows Network Load Balancing for the Secure Ticket Authority servers. 

Answer: B 
QUESTION 7 

Scenario: An administrator needs to configure secure remote access and load balancing on 
NetScaler for a XenDesktop implementation. The XenDesktop environment has two Desktop 
Delivery Controllers (DDCs) and two Web Interface servers. 

Which action must the administrator take to configure the Secure Ticket Authority in NetScaler 
Gateway? 

A. Bind individual DDCs as Secure Ticket Authorities on the NetScaler Gateway virtual server. 

B. Bind individual Web Interface servers as Secure Ticket Authorities on the NetScaler Gateway virtual server. 

C. Configure a load balancing virtual server for the DDC servers and configure the load balanced Secure 
Ticket Authority on the NetScaler Gateway virtual server. 

D. Configure a load balancing virtual server for the Web Interface servers and configure the load balanced 
Web Interface virtual server as the Secure Ticket Authority for the NetScaler Gateway virtual server. 

Answer: A 
QUESTION 8 

Which protocol could an administrator apply with rate-based monitor? 



Answer: C 



A, 
B. 
C 
D 



FTP 
ARP 
DNS 



HTTPS 
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Answer: A 
QUESTION 9 

Scenario: After an infrastructure service review, an administrator needs to improve the availability 
of core Web applications for customers. The administrator needs to place two recently purchased 
NetScalers in two different datacenters on two different subnets. 

Which two options could the administrator configure for the two NetScaler devices? (Choose two.) 

A. GSLB 

B. VRRP 

C. Cluster 

D. Virtual MAC address 

E. High availability INC pair 

Answer: AE 
QUESTION 10 

Scenario: An administrator must implement NetScaler Gateway. The solution must allow users to 
be able to change their Active Directory password from the NetScaler Gateway logon page. 
Which two actions must the administrator perform to meet the requirements of this scenario? 
(Choose two.) 

A. Configure LDAP authentication. 

B. Configure LDAPS authentication. 

C. Add a RADIUS authentication server. 

D. Enable the Allow password change' option for the LDAP authentication server. 
Answer: BD 

QUESTION 11 

Scenario: An administrator needs to configure a NetScaler to provide access to users on an 
Exchange platform. The users will only use the IMAP4 protocol. 

Which three features should the administrator configure for this scenario? (Choose three.) 

A. SSL Offload 

B. Compression 

C. Load balancing 

D. Health monitoring 

E. Integrated caching 

F. Route health injection 

Answer: ACD 
QUESTION 12 

Scenario: An administrator configures load balancing in an environment to load balance a Web 
server. The administrator needs to enhance availability in the case that the virtual server goes down. 
Which two options could the administrator configure to meet the load balancing needs for this 
environment? (Choose two.) 

A. Redirect URL 

B. Reverse monitoring 

C. Backup virtual server 

D. Content Switching virtual server 
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Answer: AC 



QUESTION 13 

Scenario: An lnternal_Web virtual server is configured with two services named wservl and wserv2. 
The services have the default weight settings. A new company policy requires that the weight ratio 
between wservl and wserv2 be 10:1. 

Which action could an administrator take to adjust the weight settings? 



A. Add wservl and wserv2 servers in the Servers tab. 

B. Modify lnternal_Web virtual server in the Services tab. 

C. Modify wservl and wserv2 services in the Services tab. 

D. Add a metric table with wservl and wserv2 metrics in the Metric Tables tab. 



Answer: B 



QUESTION 14 

Scenario: Management has requested monthly detailed performance reports for an online Web 
application. Management has also requested real-time monitoring of the environment with the 
possibility of exporting historical reports. 

Which type of reporting or monitoring tool should an administrator use to meet the requirements of 
this scenario? 



A. SNMP 

B. Syslog 

C. Citrix Command Center 

D. NetScaler Insight Center 



Answer: D 



QUESTION 15 

An administrator could generate a trace file using the and the . (Choose 

the two correct options to complete the sentence.) 



A. "nstrace.sh" command at the NetScaler shell 

B. Diagnostics option in the Configuration Utility GUI 

C. "start nstrace" command at the command-line interface 

D. "nstcpdump.sh" command at the command-line interface 



Answer: BC 



QUESTION 16 

An administrator maintains a NetScaler environment that includes Secure Ticket Authority servers 
configured with custom ports. 

Which two Secure Ticket Authority address formats could the administrator configure when using 
custom ports on the NetScaler Gateway virtual server? (Choose two.) 



A. http ://STA 1 /citrix/ctxsta .d 1 1 

B. http://STA1 .company.com :port 

C. http://1 0.10.10.1 :port/citrix/ctxsta.dll 

D. http://STA1 .company.com :port/vpn/index. html 



Answer: BC 
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QUESTION 17 

An administrator needs to use the command-line interface to create a load-balanced virtual server 
for a Web server listening on port 80. 

Which command could the administrator run at the command-line interface to accomplish this task? 

A. add vserver vServer-LB-1 10.102.29.60 

B. add lb vserver vServer-LB-1 10.102.29.60 

C. add vserver vServer-LB-1 HTTP 10.102.29.60 80 

D. add lb vserver vServer-LB-1 HTTP 10.102.29.60 80 



Answer: D 



QUESTION 18 

An administrator needs to allow remote users to access their locally-installed corporate applications 
over a secure connection. 

In order to meet this requirement, the administrator could configure on the NetScaler. 

(Choose the correct option to complete the sentence.) 



A. SSL VPN 

B. ICA Proxy 

C. SSL Offload 

D. Clientless Access 



Answer: A 



QUESTION 19 

An administrator must configure a NetScaler system to be compliant with security policies that 
require the Security Team to have the ability to provide the identity of all the connected users. 
Which action could the administrator take to meet this requirement? 



A. Configure SNMP. 

B. Generate a Trace file. 

C. Configure an audit policy. 

D. Generate a Custom Report. 



Answer: B 



QUESTION 20 

Which two actions should an administrator take to ensure the first NetScaler node configured in a 
high availability (HA) pair remains the primary node after a second node is added? (Choose two.) 



A. Set Stay Primary on the first node. 

B. Configure Stay Secondary on the second node. 

C. Enable HA Sync before adding the second node. 

D. Create a Route Monitor to ensure proper synchronization. 

E. Ensure that INC mode is enabled during creation of the HA pair. 



Answer: AB 
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